
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
File: 4HUznawWU11FeuiGK1NbzlHhIg8.mft (raw, json)
Hash identifier: Qz+9P8Kr/iGUNZ7GehpmC6RJQ5YXR813TMfsdSdIaHA=
Subject key identifier: B4:1B:DE:C7:DB:B4:BA:32:36:37:67:49:48:E6:08:4D:D5:7E:BB:D0
Authority key identifier: E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
Certificate issuer: /CN=e075339dac16535d457ae8862b535bce51e1220f
Certificate serial: 01A13ECB75E20943B22699F543A64131ADD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
Manifest number: 08EB
Signing time: Thu 15 Oct 2026 09:01:23 +0000
Manifest this update: Thu 15 Oct 2026 09:01:23 +0000
Manifest next update: Fri 16 Oct 2026 09:01:23 +0000
Files and hashes: 1: 2mEadFySpEWsuPH6ldVwsZTSUzE.roa (hash: ip58kYIdg4i0vj70PKOUYbGKVF2v+wgNn3j2A07Pob4=)
2: 4HUznawWU11FeuiGK1NbzlHhIg8.crl (hash: E0/kj3dEOmnMb+a9N7BSkiE99MizdqQlWsZYbWOe9O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:75:e2:09:43:b2:26:99:f5:43:a6:41:31:ad:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e075339dac16535d457ae8862b535bce51e1220f
Validity
Not Before: Oct 15 09:01:23 2026 GMT
Not After : Oct 16 09:01:23 2026 GMT
Subject: CN=b41bdec7dbb4ba323637674948e6084dd57ebbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:d7:79:63:1c:0d:b4:b2:ca:2d:6c:71:11:
a8:a8:fa:6e:b0:ae:af:a4:6a:19:c0:f0:dd:e2:b3:
2a:5b:b5:fb:16:d6:90:93:41:d1:e2:85:78:7e:f3:
17:ef:2e:6a:34:a0:0e:d8:f9:ad:bb:99:7f:fe:de:
67:89:99:0b:d7:31:a4:b7:e3:b5:37:10:bd:b9:30:
c6:f5:52:e8:c1:69:6c:3e:93:16:2c:a1:19:f3:c7:
03:be:78:cc:7d:5a:70:0f:df:d1:2f:93:c3:ec:5e:
fe:dc:18:0b:e9:7d:c6:b2:21:9c:4a:61:fc:50:a6:
72:c2:44:83:7e:81:01:78:7b:e8:32:9d:56:b8:ab:
88:ef:e9:63:a9:2f:9d:a8:3d:04:b9:65:f4:fe:61:
08:d7:26:b5:f4:bc:5f:bb:65:b1:09:66:55:df:85:
88:cd:ae:8a:9e:c9:bb:2a:78:ba:bd:4c:37:9f:df:
e3:db:c8:23:ff:04:2f:4f:d9:7b:c5:d2:49:a8:8f:
3e:9c:dd:65:78:41:05:00:b1:89:6a:ef:a6:07:28:
d9:0b:53:7b:bb:a5:a2:01:be:b1:aa:b3:59:94:76:
b2:dc:85:bc:3d:ed:b0:30:aa:13:0d:9d:c8:f6:b3:
96:49:29:84:21:c6:e4:d0:d5:01:f6:c8:cf:f1:4b:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1B:DE:C7:DB:B4:BA:32:36:37:67:49:48:E6:08:4D:D5:7E:BB:D0
X509v3 Authority Key Identifier:
keyid:E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:1a:5f:d2:6a:8b:7e:dc:07:de:75:3a:39:c5:10:7b:47:8d:
96:0a:36:11:b3:7d:66:dc:a2:26:05:a5:29:03:73:32:63:20:
45:e5:b8:4a:b8:2b:66:72:df:ad:9b:4c:ee:c5:4d:9f:80:cd:
fc:a3:a2:d7:a1:14:be:9d:80:ce:37:64:e7:e2:a4:3f:67:52:
20:a1:19:ef:24:51:e2:35:cd:7d:ef:06:a7:a0:8f:a7:51:ef:
d8:0c:f7:62:78:2d:21:9f:52:ce:85:3b:64:61:3d:ca:67:aa:
89:e9:80:fc:97:91:ae:d5:16:87:7b:94:64:5a:9e:d2:aa:cd:
8b:d8:ec:0a:b7:dc:b6:ca:52:b4:34:ed:92:54:f6:79:7b:fd:
a1:9a:6c:a9:57:8f:f4:00:ee:3c:77:d6:33:96:e6:84:cc:6d:
33:92:db:c2:1e:f8:31:55:72:bf:12:44:3b:b7:9f:d0:de:58:
78:8b:5d:ab:17:75:5a:48:ad:21:56:fe:7a:ee:f5:ce:d0:c0:
c1:5d:84:fa:c2:1c:b2:f9:6b:67:5e:b7:76:f7:67:ed:ef:b9:
63:97:c7:86:86:77:ff:67:00:fc:71:f8:f5:47:33:a1:c9:01:
10:46:6f:a7:fc:1a:03:9d:62:5b:94:4f:3d:b6:02:b0:7f:a4:
73:be:c6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:31:10 2026 by rpki-client